From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: gnurl: update and various changes to package definition Date: Thu, 22 Dec 2016 16:32:45 +0000 Message-ID: <87r34zorf6.fsf@wasp.i-did-not-set--mail-host-address--so-tickle-me> References: <20161221172718.28612-1-ng0@libertad.pw> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53813) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cK6IW-0002dI-AV for guix-devel@gnu.org; Thu, 22 Dec 2016 11:32:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cK6IS-00083e-BJ for guix-devel@gnu.org; Thu, 22 Dec 2016 11:32:52 -0500 Received: from aibo.runbox.com ([91.220.196.211]:42931) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cK6IS-00083J-47 for guix-devel@gnu.org; Thu, 22 Dec 2016 11:32:48 -0500 Received: from [10.9.9.211] (helo=mailfront11.runbox.com) by bars.runbox.com with esmtp (Exim 4.71) (envelope-from ) id 1cK6IP-0006WB-5y for guix-devel@gnu.org; Thu, 22 Dec 2016 17:32:45 +0100 Received: from politkovskaja.torservers.net ([77.247.181.165] helo=localhost) by mailfront11.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1cK6IH-0004Hq-PF for guix-devel@gnu.org; Thu, 22 Dec 2016 17:32:38 +0100 In-Reply-To: <20161221172718.28612-1-ng0@libertad.pw> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org ng0 writes: > [PATCH 1/3] gnu: gnurl: Update to 7.52.0 [fixes CVE..... > > I'm aware of the warning the cURL maintainers posted and will make the gnurl release as soon as they release the version of cURL fixing whatever unknown security issue they have. In my opinion, we can wait until I have released the version which fixes whatever is so insecure in cURL at the moment. I will rebase this patchset and send again then, skipping the version released on 2016-12-21. What do you think? > [PATCH 2/3] gnu: gnurl: Make tests more verbose. > > Compare to curl.scm > > [PATCH 3/3] gnu: gnurl: Split man pages to doc output. > > Man pages are 1.5 MB big. Split it. > > -- ♥Ⓐ ng0 | PGP keys and more: https://n0is.noblogs.org/ | http://ng0.chaosnet.org